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AMENDMENTS TO THE CLAIMS 

Claims 1,2, 4,5,7, 8, 11, 12, 14, 17, 18, 21-27, 31, and 32 have been amended and 
claims 29 and 30 have been canceled. The following is a complete listing of the claims, which 
replaces all previous versions and listings of the claims. 

1 . (currently amended) A method of operating a first security module ina 
computer , the method comprising the acts of: 

detecting a second security module in the computer ; 

determining whether a key associated with the second security module is stored at 

availabl e to the first security module; and 
obtaining the key associated with the second security module if the key associated with 

the second security module is not stored at availabl e to the first security module. 

2. (currently amended) The method set forth in claim 1 , wherein comprising the act 
of configuring the first security module is te-be a trusted platform module ("TPM"). 

3 . (original) The method set forth in claim 1 , comprising the act of requesting the 
key from the second security module. 

• 4. (currently amended) The method set forth in claim 1 , comprising the act of 
sending a public key from the first security module to the second security module if the key 
associated with the second security module is not stored at availabl e to the first security module. 
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5. (currently amended) The method set forth in claim 1 , comprising the act of 
sending a public key along with validation information from the first security module to the 
second security module if the key associated with the second security module is not stored at 
availabl e to the first security module. 

6. (original) The method set forth in claim 1 , comprising the act of storing the key 
in a memory associated with the first security module. 

7. (currently amended) The method set forth in claim 1 , wherein comprising th e act 
of d e fining the key iste-be a private key. 

8. (currently amended) A security module in a computer , comprising: 

a detector that is adapted to detect another security module in the computer and 
determine whether one of a plurality of keys stored at the security module is associated 
with the other security module; and 

a device that obtains at least one key associated with the other security module if 
the one of the plurality of keys stored at the security module is not associated with the 
other security module. 

9. (original) The security module set forth in claim 8, wherein the security module 
comprises a trusted platform module ("TPM"). 

Page 3 of 16 



Serial No. 10/764,918 
Amendment and Response to Office Action 

Mailed April 5, 2006 

10. (original) The security module set forth in claim 8, wherein the security module 
is adapted to request the at least one key from the other security module. 

1 1 . (currently amended) The security module set forth in claim 8, wherein the 
security module is adapted to send a public key to the other security module if the at least one 
key is not stored at availabl e to the security module. 

12. (currently amended) The security module set forth in claim 8, wherein the 
security module is adapted to send a public key along with validation information to the other 
security module if the at least one key is not stored at availabl e to the security module. 

13. (original) The security module set forth in claim 8, wherein the at least one key is 
a private key. 

14. (currently amended) A security modul e in a computer , comprising: 
means for detecting another security module in the computer ; 

means for determining whether a key associated with the other security module is stored 

at availabl e to the security module; and 
means for obtaining the key associated with the other security module if the key 

associated with the other security module is not stored at availabl e to the security 

module. 
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15. (original) The security module set forth in claim 14, wherein the security module 
comprises a trusted platform module ("TPM"). 

16. (original) The security module set forth in claim 14, wherein the security module 
is adapted to request the key from the other security module. 

17. (currently amended) The security module set forth in claim 14, wherein the 
security module is adapted to send a public key to the other security module if the key associated 
with the other security module is not stored at available to the security module. 

18. (currently amended) The security module set forth in claim 14, wherein the 
security module is adapted to send a public key along with validation information to the other 
security module if the key associated with the other security module is not stored at available to 
the security module. 

19. (original) The security module set forth in claim 14, wherein the security module 
is adapted to store the key in a memory associated with the security module. 

20. (original) The security module set forth in claim 14, wherein the key comprises a 
private key. 
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21. (currently amended) A computer system comprising: 

a processor for e x e cuting configured to execute p rogram instructions; 

a storage device for storing configured to store p rogram instructions to be delivered to the 

processor; 
a first security module; and 

a second security module at least on e p e ripheral devic e that is controlled by th e proc e ssor; 

Culu 

a first s e curity modul e associat e d with th e at least one peripheral d e vic e, the first security 
module comprising: 

a detector that is adapted to detect a the second security module and determine 
whether one of a plurality of keys stored at the first security module is 
associated with the second security modulet-and, wherein the first security 
module a devic e that obtains at least one key associated with the second 
security module if the one of the plurality of keys stored at the first 
security module is not associated with the second security module. 

22. (currently amended) The computer syst e m set forth in claim 2 1 , wherein the first 
security module comprises a trusted platform module ("TPM"). 

23 . (currently amended) The computer system set forth in claim 2 1 , wherein the first 
security module is adapted to request the at least one key from the second security module. 
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24. (currently amended) The computer syst e m set forth in claim 21 , wherein the first 
security module is adapted to send a public key to the second security module if the at least one 
key is not stored at availabl e to the first security module. 

25. (currently amended) The computer syst e m set forth in claim 21 , wherein the first 
security module is adapted to send a public key along with validation information to the second 
security module if the at least one key is not stored at availabl e to the first security module. 

26. (currently amended) The computer sy s t e m set forth in claim 2 1 , wherein the at 
least one key is a private key. 

27. (currently amended) A method of unsealing information from a plurality of 
security modules, the method comprising the acts of: 

detaching an identifier from sealed information for one of the plurality of security 
modules; 

decrypting the sealed information with a key that is associated with another of the 

plurality of security modules; 
calculating a hash of the decrypted sealed information; and 

comparing the calculated hash to the identifier to determine if the key was used to encrypt 
the sealed information; 
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returning a decrypt key found message if the key is the key used to encrypt the sealed 

information or returning a decrypt key not found message if the key is not the key 
used to encrypt the sealed information . 

28. (original) The method set forth in claim 27, wherein the plurality of security 
modules comprise trusted platform modules ("TPMs"). 

29-30. (canceled) 

3 1 . (currently amended) A computer network, comprising: 
a plurality of computers comput e r syst e ms ; 

a network infrastructure that connects the plurality of computers comput e r syst e ms 
together; 

at least one of the plurality of computers computer systems comprising: 
a first security modul e; and 

a second security module, the first security module comprising being configur e d 

te: 

a detector adapted to detect the a second security module^ and determine 
whether a key associated with the second security module is stored 
at _availabl e to the first security module^j-aad wherein the first 
security module obtains o btain the key associated with the second 
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security module if the key associated with the second security 
module is not stored at availabl e to the first security module. 

32. (currently amended) The computer network, as set forth in claim 3 1 , wherein the 
first security module m odul e s comprises a trusted platform module ("TPM"). 
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